exploitDog

CVE-2023-49208

Опубликовано: 23 нояб. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registration.

Ссылки

https://github.com/babelouest/glewlwyd/commit/f9d8c06aae8dfe17e761b18b577ff169e059e812
Patch
https://github.com/babelouest/glewlwyd/releases/tag/v2.7.6
Patch
Release Notes
https://github.com/babelouest/glewlwyd/commit/f9d8c06aae8dfe17e761b18b577ff169e059e812
Patch
https://github.com/babelouest/glewlwyd/releases/tag/v2.7.6
Patch
Release Notes

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:glewlwyd_sso_server_project:glewlwyd_sso_server:*:*:*:*:*:*:*:*

Версия до 2.7.6 (исключая)

EPSS

Процентиль: 31%

0.00116

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-120

CWE-120

Связанные уязвимости

CVE-2023-49208

CVSS3: 9.8

ubuntu

около 2 лет назад

scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registration.

CVE-2023-49208

CVSS3: 9.8

debian

около 2 лет назад

scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible b ...

GHSA-x7rh-wvh4-cx6x

CVSS3: 9.8

github

около 2 лет назад

scheme/webauthn.c in Glewlwyd SSO server before 2.7.6 has a possible buffer overflow during FIDO2 credentials validation in webauthn registration.

EPSS

Процентиль: 31%

0.00116

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-120

CWE-120